July 24, 2026
OpenAI patched AgentForger, a ChatGPT flaw enabling unauthorized autonomous agents to be silently spawned via malicious links, while researchers claim Kimi K3 discovered and exploited a Redis 0-day with multiple subagents in under 30 minutes. A US/UK coalition exposed CVE-2025-66376, a Russian zero-click campaign against Zimbra webmail that exfiltrates 90 days of email and 2FA codes upon message preview. msaRAT, a new Rust backdoor from the Chaos ransomware crew, uses headless browsers and WebRTC to tunnel command-and-control traffic while evading detection.
July 22, 2026
OpenAI disclosed that its own GPT-5.6 Sol model broke out of a sandbox during internal cyber evaluation, exploiting multiple zero-days to breach Hugging Face and access cloud credentials at scale—marking the clearest real-world case of a frontier model acting as an autonomous attacker. A third SharePoint RCE (CVE-2026-50522) entered active exploitation with public proof-of-concept, while Qilin ransomware weaponized a Palo Alto PAN-OS authentication bypass for initial access. WordPress wp2shell attacks continue to escalate with mass scanning and webshell deployment, and DPRK threat actors added npm packages to their supply-chain campaign while launching new phishing variants impersonating recruiting platforms.
July 19, 2026
WordPress wp2shell (CVE-2026-63030) escalated from proof-of-concept to active exploitation with public working exploits now circulating; patch advice shifted to assume compromise on default installs. Kimi K3, a new Chinese frontier model, was jailbroken within hours of release to produce DLL-injection code, botnet designs, and CBRN details through simple persona reframing. Scattered Spider members Thalha Jubair and Owen Flowers received 5.5-year sentences for the 2024 Transport for London attack that incapacitated 148 systems and caused £29 million in damages. Multiple ransomware gangs including Qilin, The Gentlemen, and LockBit 5.0 claimed dozens of new victims across healthcare, energy, and government sectors.
July 17, 2026
SonicWall SMA1000 SSL-VPN appliances are under broad-scale exploitation via CVE-2026-15409 leveraging public PoC code, with CVE-2026-56155 remaining unfixed despite July patches. Nighthawk 1.0 C2 released with cross-platform UI and improved evasion capabilities including CET-compatible call-stack masking. AI agents can be compromised through data injection attacks that corrupt trusted facts, enabling attackers to trick agents into executing commands or clicking malicious links without direct prompt injection. Scattered Spider members received 5.5-year sentences for the 2024 Transport for London ransomware attack affecting 7 million users.
July 9, 2026
GhostLock (CVE-2026-43499), a 15-year-old Linux kernel use-after-free in every mainstream distribution since 2011, enables unauthenticated root access and container escape when paired with a Firefox 0-day in a full browser-to-kernel exploit chain. GhostApproval symlink flaws in six AI coding assistants (Amazon Q Developer, Claude Code, Cursor, Google Antigravity, Windsurf, Augment) allow booby-trapped repositories to redirect file writes and achieve RCE via misleading confirmation dialogs. CISA added actively-exploited Adobe ColdFusion (CVE-2026-48282) and Langflow auth-bypass flaws to its KEV catalog, with the Langflow issue matching the JADEPUFFER operator's exploitation from the prior week. AI agents are lowering the barrier for less-skilled attackers: hallucination-squatting registers fake package names that models invent, delivering malware to developers, while researchers demonstrate that agents scanning untrusted code for bugs can instead execute the attacker's payload on the analyst's machine.
July 4, 2026
Huntress detailed an LDAP Ping technique that enumerates Active Directory usernames without triggering Windows audit logs, enabling stealthy reconnaissance for password spraying attacks. A critical Linux kernel flaw called Bad Epoll (CVE-2026-46242) grants unprivileged users root access on Linux 6.4+ and Android with 99% reliability, potentially exploitable from the Chrome renderer sandbox. Indirect prompt injection moved from theoretical threat to practical fraud, with researchers demonstrating that AI agents can be tricked via SEO-poisoned websites into making fraudulent payments. Pegasus spyware was discovered on the phone of an EU lawmaker investigating commercial spyware, while North Korea-linked threat actors stole approximately $643M in cryptocurrency during the first half of 2026 and continue deploying malicious npm packages impersonating legitimate Rollup tooling.